litellm/.semgrep/rules/README.md
Alexsander Hamir f32322cd41
chore: improve Semgrep rules documentation and organization (#20978)
- Add organizing rules (language/domain structure, naming, metadata)
- Require all rules to fail CI (severity: ERROR, no warn-only)
- Move unbounded-memory.yml to python/reliability/ per structure
- Enhance unbounded-memory rule metadata (tags, confidence, source)
2026-02-11 09:39:44 -08:00

576 B
Raw Blame History

Custom Semgrep rules for LiteLLM

Add custom rule YAML files here. Semgrep loads all .yml/.yaml files under this directory.

Run only custom rules (CI / fail on findings):

semgrep scan --config .semgrep/rules . --error

Run with registry + custom rules:

semgrep scan --config auto --config .semgrep/rules .

Layout:

  • python/ Python-specific rules (security, patterns)
  • Add more subdirs as needed (e.g. generic/ for language-agnostic rules)

See Semgrep rule syntax.